Remarks 

The above Amendments and these Remarks are in reply to the Final Office Action mailed 
February 12, 2003. No fee is due for the addition of any new claims. 

Claims 1-14 were pending in the Application prior to the outstanding Final Office Action. In 
the Final Office Action, the Examiner rejected claims 1-14. Reconsideration of the rejections is 
respectfully requested. 
I. Rejection under 35 USC 112 

Claims 2, 5-8, and 14 are rejected under 35 U.S.C. §112, first paragraph, as containing 
subject matter which was not described in the specification in such a way as to reasonably convey 
to one skilled in the relevant art that the inventor(s), at the time the application was filed, had 
possession of the claimed invention. Claim 2 has been amended for purposes of clarity, and in its 
present form does not contain the language that was rejected. Applicants respectfully submit that 
the limitations recited in claim 2 are supported by, and described in, the specification as filed. 
Claims 5-8 depend from claim 2 and, as their dependence was the sole reason for rejection, are 
also supported by, and described in, the specification as filed. Claim 14 also has been amended 
for purposes of clarity, and in its present form does not contain the language that was rejected. 
Applicants therefore respectfully request that the rejection with respect to claims 2, 5-8 and 14 be 
withdrawn. 

Claim 10 is rejected under 35 U.S.C. §112, first paragraph, as containing subject matter 
which was not described in the specification in such a way as to reasonably convey to one skilled 
in the relevant art that the inventor(s), at the time the application was filed, had possession of the 
claimed invention. Claim 10 has been amended for purposes of clarity, and in its present form does 
not contain the language that was rejected. Applicants respectfully submit that the limitations 
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recited in claim 10 are supported by, and described in, the specification as filed. Applicants 
therefore respectfully request that the rejection with respect to claim 10 be withdrawn. 

Claim 11 is rejected under 35 U.S.C. §112, first paragraph, as containing subject matter 
which was not described in the specification in such a way as to reasonably convey to one skilled 
in the relevant art that the inventor(s), at the time the application was filed, had possession of the 
claimed invention. Claim 1 1 has been amended for purposes of clarity, and in its present form does 
not contain the language that was rejected. Applicants respectfully submit that the limitations 
recited in claim 11 are supported by, and described in, the specification as filed. Applicants 
therefore respectfully request that the rejection with respect to claim 1 1 be withdrawn. 

Claim 12 is rejected under 35 U.S.C. §112, first paragraph, as containing subject matter 
which was not described in the specification in such a way as to reasonably convey to one skilled 
in the relevant art that the inventor(s), at the time the application was filed, had possession of the 
claimed invention. Claim 1 2 has been amended for purposes of clarity, and in its present form does 
not contain the language that was rejected. Applicants respectfully submit that the limitations 
recited in claim 12 are supported by, and described in, the specification as filed. Applicants 
therefore respectfully request that the rejection with respect to claim 12 be withdrawn. 

Claim 14 is rejected under 35 U.S.C. §112, first paragraph, as containing subject matter 
which was not described in the specification in such a way as to reasonably convey to one skilled 
in the relevant art that the inventor(s), at the time the application was filed, had possession of the 
claimed invention. Claim 14 has been amended for purposes of clarity, and in its present form does 
not contain the language that was rejected. Applicants respectfully submit that the limitations 
recited in claim 14 are supported by, and described in, the specification as filed. Applicants 
therefore respectfully request that the rejection with respect to claim 14 be withdrawn. 
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Claim 1 1 is rejected under 35 U.S.C. §112, first paragraph, as lacking proper antecedent 
basis. Claim 11 has been amended to properly depend from claim 10. Applicants respectfully 
submit that claim 1 1 contains proper antecedent basis for each recited term, and respectfully 
request that the rejection with respect to claim 1 1 be withdrawn. 

Claims 2 and 5-8 are rejected under 35 U.S.C. §112, first paragraph, as lacking proper 
antecedent basis. Claim 2 has been amended for purposes of clarity, and in its present form does 
not contain the language that was rejected. Applicants respectfully submit that claim 2 contains 
proper antecedent basis for each recited term. Claims 5-8 depend from claim 2 and, as their 
dependence was the sole reason for rejection, also contain proper antecedent basis for each 
recited term. Applicants therefore respectfully request that the rejection with respect to claims 2 and 
5-8 be withdrawn. 
II. Rejection under 35 USC 103 

Claims 1-9 and 12-14 are rejected under 35 U.S.C. §103(a) as being unpatentable over 
Quinlan, in view of Wagner, further in view of Langford, and further in view of McGee. 

A. Quinlan - Applicants respectfully disagree with the Examiner's reading of Quinlan. 
Quinlan is directed to a gateway component that runs on a client machine, that sets up and 
manages a persistent connection with a server through the Internet. (Col. 5, lines 15-56; col. 7, 
lines 17-25; Figure 1). It is this management approach that allows for the avoidance of 
"unnecessary scanning operations for detecting 'cookies'" (col 7, lines 26-36). Quinlan does not 
disclose the detection of cookies, or "stripping off any cookies." In fact, one of the advantages of 
the management approach of Quinlan is that a user does not have to detect and/or manage 
cookies (col 7, lines 26-36). 

Quinlan does not teach "stripping off any cookies set by an external web site from the 
response header of the response Web page." Quinlan does not teach or suggest storing cookies 
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in a repository. Quinlan does not teach or suggest "appending the session id to all of the links 
embedded in the response page." Quinlan also does not teach or suggest "sending the modified 
response page, with the new header, to the client". First, Quinlan does not teach modifying a 
response page with a new header. Second, Quinlan does not teach "sending the modified 
response page" to the client, as the gateway component is installed on the client and not on the 
server. Therefore, Quinlan cannot render claim 1 obvious. 

B. Wagner - Wagner does not make up for the deficiencies in Quinlan. Applicants' claim 
1 recites "stripping off any cookies set by an external web site from the response header of the 
response Web page and storing the cookies in a repository." Wagner does not disclose such a 
limitation, as Wagner only teaches detecting and deleting cookie data from the HTTP header of an 
incoming request before it is passed to the browser and stored in cache (col. 2, lines 61-65). 
Detected cookies are logged such that a user can view what was deleted and , if the user wants the 
deleted material, can "modify the configuration data" and "cause the browser to request the page 
from the server again" (col 5., lines 1 8-38). Wagner does not teach or suggest "storing the cookies 
in a repository" on behalf of the client for a session id. Wagner also fails to teach or suggest 
"appending the session id to all of the links embedded in the response page" or "sending the 
modified response page, with the new header, to the client", As such, Quinlan and Wagner cannot 
render claim 1 obvious, either alone or in combination. 

C. McGee - McGee fails to make up for the deficiencies in Quinlan and Wagner. Applicants 
respectfully disagree with the Examiner's reading of McGee. McGee does not disclose appending 
the session id to all the URLs embedded in a Web page. McGee instead teaches in the cited 
sections that access can be controlled to resources by not providing a client with a URL , but 
instead providing a token for items that can be validly accessed by a user (col. 4, lines 14-18; col. 
10, lines 34-67; col. 1 1 , lines 56-67). McGee in fact teaches away from appending a session id to 
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a URL embedded in a Web page, as the user could still determine the location of the resource . 
" An advantage of this aspect of the invention is that the client is not provided with the actual 
reference information, such as a URL " (col. 4, lines 14-18). As such, McGee cannot make up for 
the deficiencies in Quinlan and Wagner with respect to claim 1. 

D. Lang ford - Langford fails to make up for the deficiencies in Quinlan, Wagner, and 
McGee. Langford is directed to an improved data deletion system, not a repository for storing 
cookies. Langford ensures "a physical deletion of information and secure deletion of information 
when desired," (col. 3, lines 52-53) in one embodiment by performing "an encrypted overwrite 
deletion process " by encrypting "the data to be deleted using an encryption key" and overwriting 
"the original data in the file with the encrypted data" (col 4. Line 62-col. 5, line 4). Langford does 
not teach or suggest storing information in a repository, but discloses encrypting data to be deleted 
and overwriting the unencrypted data such that only the user can recover the data in the event that 
the user inadvertently deleted the information. Even if the motivation existed to apply the data 
deletion process of Langford to the cookie deletion process of Wagner, the combination still does 
not teach or suggest "storing the cookies in a repository." Langford also fails to teach or suggest 
any of the other elements of claim 1 . As such, Langford cannot make up for the deficiencies in 
Quinlan, McGee and Wagner with respect to claim 1 . 

Further, even if Quinlan, Wagner, Langford, and McGee could be combined to render claim 
1 obvious, there is no teaching, suggestion, or motivation to do so found either explicitly or implicitly 
in the references themselves or in the knowledge generally available to one of ordinary skill in the 
art (MPEP 2143.01 ). The mere fact that references can be combined or modified does not render 
the resultant combination obvious unless the prior art also suggests the desirability of the 
combination. References such as McGee which actually teach away from some of the claimed 
elements go against a suggestion or motivation to combine. Further, it is not sufficient to simply 
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find each element of a claim in a reference and combine those references. In the present case, 
four references were needed to reject a claim with four elements, and in the case of claim 2 four 
references were needed to reject a claim with three elements. Applicants therefore respectfully 
submit that even if Quinlan, Wagner, Langford, and McGee did show elements similar to those 
recited in Applicants' claim 1, there is no teaching, suggestion, or motivation to combine the 
references. 

Further, a reasonable expectation of success of the proposed combination or modification 
is also required to support an obviousness rejection (MPEP 2143.02). There is no suggestion in 
any of the references that the teachings can be combined with any reasonable expectation of 
success. For example, Langford discloses encrypting deleted data and overwriting existing data. 
There is no demonstration or suggestion that a Web server handling thousands of requests would 
be able to encrypt deleted cookie information for each of those requests without creating a 
bottleneck, or how such a Web server could successfully provide a user for each of those 
thousands of requests with a way to provide a security key and manually "undelete" the cookie 
information as taught in Langford. Further, there is no teaching in any of the references of how 
such a system would take the de-encrypted, un-deleted information and reintroduce that 
information into the header of a subsequent Web request or response on a session, which would 
be required if using a Langford approach. There is no reasonable expectation of success of the 
proposed combination demonstrated or suggested in any of the references, either alone or in 
combination. 

As set forth above, none of the references teach or suggest the elements of claim 1 , either 
alone or in combination. Further, there is no motivation to combine the references found either 
explicitly or implicitly in the references themselves or in the knowledge generally available to one 
of ordinary skill in the art. Also, there is no demonstration that the references could be combined 
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to obviate the invnetion of claim 1 with any likelihood of success. Claim 1 therefore cannot be 
rendered obvious by Quinlan in view of Wagner, McGee, and Langford. Applicants therefore 
respectfully request that the rejection with respect to claim 1 be withdrawn. 

Claims 2 and 14 contain similar limitations to those discussed above with respect to claim 
1 and therefore should not be rendered obvious for the reasons set forth above. Claims 3-9 and 
12-13 depend from claim 2, and therefore should also not be rendered obvious by these claims. 
Applicants therefore respectfully request that the rejection with respect to claims 1-9 and 12-14 be 
withdrawn. 

Claims 10-11 are rejected under 35 U.S.C. §1 03(a) as being obvious over the above 
references , and further in view of Olden. Claims 1 0-1 1 depend from claim 2, which is not rendered 
obvious by the above references for reasons discussed above. As claim 2 is not rendered obvious, 
neither can claims 10-11 be rendered obvious. Further, Olden discloses the setting of "time out 
settings" for a cookie that renders the cookie "unuseable after a period of inactivity" (col. 24, lines 
29-46). Olden does not teach or suggest "setting a lifetime for a session." The period of inactivity 
of a cookie may in fact be longer than a session, as cookies are often stored in a browser after an 
Internet session has expired. As claims 1 0-1 1 depend from claim 2, and further as Olden does not 
teach or suggest "setting a lifetime for a session," Applicants submit that claims 10-1 1 are also not 
rendered obvious and respectfully request that the rejection with respect to claims 10-11 be 
withdrawn. 
III. Conclusion 

In light of the above, it is respectfully submitted that all of the claims now pending in the 
subject patent application should be allowable, and a Notice of Allowance is requested. The 
Examiner is respectfully requested to telephone the undersigned if he can assist in any way in 
expediting issuance of a patent. 
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The Commissioner is authorized to charge any underpayment or credit any overpayment 
to Deposit Account No. 06-1 325 for any matter in connection with this response, including any fee 
for extension of time, which may be required. 



Respectfully submitted, 



Date: 




FLIESLER DUBB MEYER & LOVEJOY LLP 
Four Embarcadero Center, Fourth Floor 
San Francisco, California 94111-4156 
Telephone: (415) 362-3800 
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Appendix 

2. (Once Amended): A method for handling cookies for a client browser, comprising: 
generating a unique session id in response to a request from a client browser; 
removing any cookies from a response page for the request and storing [the] information 

contained in each cookie in a cookie repository; and 

appending the unique session id to [any] each URL in the response page before sending 

the response page to the client browser. 

10. (Once Amended): A method according to claim 2, further comprising: 

setting a lifetime for a session corresponding to the unique session id. 

1 1 . (Once Amended): A method according to claim [9] 10, further comprising: 

[dropping] storing the information from the cookie repository [when] during the lifetime 
[expires] of the session . 

12. (Once Amended): A method according to claim 2, further comprising: 

determining whether the client browser [has disabled] accepts cookies. 

14. (Once Amended): A method for storing information for a client, comprising: 

removing information from a document and storing that information in a repository [on a 
proxy server]; 

appending an identifier to [any] each link in the document and sending that document to the 
client, the identifier identifying the information being stored in the repository for the client. 
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